Back to Browse

Gsc MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Read-only Google Search Console MCP: Search Analytics, sitemaps, URL inspection. 5 tools.

About

Read-only Google Search Console MCP: Search Analytics, sitemaps, URL inspection. 5 tools.

Security Report

4.8
Use Caution4.8High Risk

This is a well-structured, read-only MCP server for Google Search Console with proper authentication via service account credentials and appropriate permission scoping. The code demonstrates good security practices including credential redaction in logs, input validation, and rate limiting. Minor code quality observations exist but do not constitute security vulnerabilities. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

7 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Path to a Google service-account JSON file with the Search Console read-only scope; share each property with the service account emailOptional

Environment variable: GOOGLE_APPLICATION_CREDENTIALS

Log level, default INFOOptional

Environment variable: GSC_LOG_LEVEL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-scalably-gsc-mcp": {
      "env": {
        "GSC_LOG_LEVEL": "your-gsc-log-level-here",
        "GOOGLE_APPLICATION_CREDENTIALS": "your-google-application-credentials-here"
      },
      "args": [
        "scalably-gsc-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Google Search Console MCP

Read-only MCP server for Google Search Console. Five tools cover the read surface: properties, Search Analytics (filters, auto-pagination past the 25,000-row cap, hourly data), sitemaps, URL inspection, batch inspection with throttling. We run this server in production for every SEO client.

Install

Claude Code:

claude mcp add gsc -e GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json -- uvx scalably-gsc-mcp

Codex:

codex mcp add gsc --env GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json -- uvx scalably-gsc-mcp

Claude Desktop: download gsc-mcp.mcpb from the latest GitHub release and open it.

Setup

  1. In Google Cloud, create or pick a project and enable the Google Search Console API on it (APIs and Services, Library).
  2. Create a service account in that project and download its JSON key.
  3. Add the service account's email as a user on each Search Console property you want to query (Settings, Users and permissions). Full or restricted permission both work for reading.

No OAuth consent screen is needed; the server authenticates as the service account with the webmasters.readonly scope.

Tools (5)

ToolWhat it does
gsc_list_sitesList the Search Console properties the service account can read
gsc_query_search_analyticsQuery Search Analytics with filters, auto-pagination and hourly data
gsc_list_sitemapsList sitemaps for a property or read one sitemap
gsc_inspect_urlInspect one URL's index status
gsc_batch_inspect_urlsInspect many URLs with client-side throttling

Configuration

VariableRequiredPurpose
GOOGLE_APPLICATION_CREDENTIALSyesPath to a Google service-account JSON file with the Search Console read-only scope; share each property with the service account email
GSC_LOG_LEVELnoINFO (default) or DEBUG
GSC_RETRY_BASE_SECONDSnoBase delay in seconds for the retry backoff on transient API errors (default 1)
GSC_WEBMASTERS_BASE, GSC_SEARCHCONSOLE_BASEnoOverride the two Google API base URLs (used by the test suite to point at a local fake; leave unset in normal use)
GSC_TEST_ACCESS_TOKENnoTest-suite only: a literal bearer token that bypasses the service account. Never set it in normal use

Reply shape

Every tool returns JSON with status (succeeded, partial, no_op), operation, summary, target, result, proof, warnings, recovery. Failures surface as a tool error whose text is <code>: <message> <hint>. A partial status with proof.nextStartRow means: continue from that row.

Limits

25,000 rows per Search Analytics call (the server auto-paginates past it up to max_rows). URL inspection: Google allows 600 per minute and 2,000 per day per property. The server paces batch inspection client-side (default 8 requests per second) and warns when a batch exceeds the daily quota; it does not track daily usage across calls, so keep your own count.

Verify

Each release lists the package version, the .mcpb sha256 and the production commit it was derived from in CHANGELOG.md. CI runs the tests and a clean install of the built wheel on every push.

Privacy Policy

This server runs locally, on your machine, under your own credentials. It collects no personal data, contains no telemetry, stores nothing persistently, and talks only to the vendor API it wraps. No third party, including Scalably, receives your data. Contact: hello@scalably.io. Canonical copy: https://scalably.io/connector-privacy.html

License

MIT. Copyright Scalably.

Reviews

No reviews yet

Be the first to review this server!